Fix multiple file inclusion vulnerabilities

 - local file inclusions
 - remote file inclusion
 - directory traversal

 Vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple SQL injections

Vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.
Fix multiple XSS vulnerabilities

vulnerabilites discovered by Janek Vind <come2waraxe@yahoo.com>.